LI
Product
libtiff
by libtiff · last CVE Mar 24, 2026
262
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 11High 70Medium 122Low 5
Watch

Add libtiff to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-30775
5.5
0%
May 19
A vulnerability was found in the libtiff library
Affected: 4.4.0
CVE-2023-30774
5.5
1%
May 19
A vulnerability was found in the libtiff library
Affected: 3.5.1 through 4.4.0
CVE-2023-2731
5.5
0%
May 17
A NULL pointer dereference flaw was found in Libtiff's LZWDecode() function in the libtiff/tif_lzw.c file
Affected: before 4.5.0
CVE-2023-30086
5.5
0%
May 9
Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c
Affected: 4.0.7
CVE-2022-4645
5.5
0%
Mar 3
LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/tiffcp.c:948, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: 3.5.1 through 4.4.0
CVE-2023-0804
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3609, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0803
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3516, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0802
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3724, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0801
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6778, allowing attackers to cause a…
Affected: through 4.4.0
CVE-2023-0800
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds write in tiffcrop in tools/tiffcrop.c:3502, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0799
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3701, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0798
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3400, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0797
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in libtiff/tif_unix.c:368, invoked by tools/tiffcrop.c:2903 and tools/tiffcrop.c:6921, allowing attackers to cause a…
Affected: through 4.4.0
CVE-2023-0796
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3592, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2023-0795
5.5
0%
Feb 13
LibTIFF 4.4.0 has an out-of-bounds read in tiffcrop in tools/tiffcrop.c:3488, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2022-48281
5.5
0%
Jan 23
processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., "WRITE of size 307203") via a crafted TIFF image
Affected: through 4.5.0
CVE-2022-3570
5.5
1%
Oct 21
Multiple heap buffer overflows in tiffcrop.c utility in libtiff library Version 4.4.0 allows attacker to trigger unsafe or out of bounds memory access via crafted TIFF image file…
Affected: >=3.9.0, <=4.4.0
CVE-2022-1354
5.5
1%
Aug 31
A heap buffer overflow flaw was found in Libtiffs' tiffinfo.c in TIFFReadRawDataStriped() function
Affected: before 4.4.0
CVE-2022-2953
5.5
1%
Aug 29
LibTIFF 4.4.0 has an out-of-bounds read in extractImageSection in tools/tiffcrop.c:6905, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: through 4.4.0
CVE-2022-2869
5.5
0%
Aug 17
libtiff's tiffcrop tool has a uint32_t underflow which leads to out of bounds read and write in the extractContigSamples8bits routine
Affected: before 4.4.0
CVE-2022-2868
5.5
0%
Aug 17
libtiff's tiffcrop utility has a improper input validation flaw that can lead to out of bounds read and ultimately cause a crash if an attacker is able to supply a crafted file to…
Affected: before 4.4.0
CVE-2022-2867
5.5
0%
Aug 17
libtiff's tiffcrop utility has a uint32_t underflow that can lead to out of bounds read and write
Affected: before 4.4.0
CVE-2022-34266
5.5
0%
Jul 19
The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service (application crash), a different vulnerability than…
Affected: 4.0.3-35
CVE-2022-1623
5.5
1%
May 11
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:624, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-1622
5.5
2%
May 11
LibTIFF master branch has an out-of-bounds read in LZWDecode in libtiff/tif_lzw.c:619, allowing attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-1056
5.5
1%
Mar 28
Out-of-bounds Read error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-0924
5.5
1%
Mar 11
Out-of-bounds Read error in tiffcp in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-0909
5.5
1%
Mar 11
Divide By Zero error in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-0908
5.5
1%
Mar 11
Null source pointer passed as an argument to memcpy() function within TIFFFetchNormalTag () in tif_dirread.c in libtiff versions up to 4.3.0 could lead to Denial of Service via…
Affected: through 4.3.0
CVE-2022-0907
5.5
1%
Mar 11
Unchecked Return Value to NULL Pointer Dereference in tiffcrop in libtiff 4.3.0 allows attackers to cause a denial-of-service via a crafted tiff file
Affected: 4.3.0
CVE-2022-0562
5.5
1%
Feb 11
Null source pointer passed as an argument to memcpy() function within TIFFReadDirectory() in tif_dirread.c in libtiff versions from 4.0 to 4.3.0 could lead to Denial of Service…
Affected: 4.0.0 through 4.3.0
CVE-2022-0561
5.5
1%
Feb 11
Null source pointer passed as an argument to memcpy() function within TIFFFetchStripThing() in tif_dirread.c in libtiff versions from 3.9.0 to 4.3.0 could lead to Denial of…
Affected: 3.9.0 through 4.3.0
CVE-2022-22844
5.5
1%
Jan 10
LibTIFF 4.3.0 has an out-of-bounds read in _TIFFmemcpy in tif_unix.c in certain situations involving a custom tag and 0x0200 as the second word of the DE field
Affected: 4.3.0
CVE-2020-35522
5.5
2%
Mar 9
In LibTIFF, there is a memory malloc failure in tif_pixarlog.c
Affected: before 4.2.0
CVE-2020-35521
5.5
1%
Mar 9
A flaw was found in libtiff
Affected: before 4.2.0
CVE-2016-10371
5.5
1%
May 10
The TIFFWriteDirectoryTagCheckedRational function in tif_dirwrite.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (assertion failure and application exit)…
Affected: 4.0.6
CVE-2016-5322
5.5
2%
Apr 11
The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image
Affected: through 4.0.6
CVE-2017-7595
5.5
1%
Apr 9
The JPEGSetupEncode function in tiff_jpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted image
Affected: 4.0.7
CVE-2017-7594
5.5
2%
Apr 9
The OJPEGReadHeaderInfoSecTablesDcTable function in tif_ojpeg.c in LibTIFF 4.0.7 allows remote attackers to cause a denial of service (memory leak) via a crafted image
Affected: 4.0.7
CVE-2017-7593
5.5
2%
Apr 9
tif_read.c in LibTIFF 4.0.7 does not ensure that tif_rawdata is properly initialized, which might allow remote attackers to obtain sensitive information from process memory via a…
Affected: 4.0.7
CVE-2016-10267
5.5
2%
Mar 24
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_ojpeg.c:816:8
Affected: 4.0.7
CVE-2016-10266
5.5
2%
Mar 24
LibTIFF 4.0.7 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted TIFF image, related to libtiff/tif_read.c:351:22
Affected: 4.0.7
CVE-2015-7313
5.5
2%
Mar 17
LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (memory consumption and crash) via a crafted tiff file
Affected: before 4.0.7
CVE-2016-5315
5.5
2%
Mar 7
The setByteArray function in tif_dir.c in libtiff 4.0.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted tiff image
Affected: through 4.0.6
CVE-2016-10095
5.5
3%
Mar 1
Stack-based buffer overflow in the _TIFFVGetField function in tif_dir.c in LibTIFF 4.0.0alpha4, 4.0.0alpha5, 4.0.0alpha6, 4.0.0beta7, 4.0.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.4beta,…
Affected: 4.0.7
CVE-2016-9532
5.5
2%
Feb 6
Integer overflow in the writeBufferToSeparateStrips function in tiffcrop.c in LibTIFF before 4.0.7 allows remote attackers to cause a denial of service (out-of-bounds read) via a…
Affected: through 4.0.6
CVE-2016-5102
5.5
2%
Feb 6
Buffer overflow in the readgifimage function in gif2tiff.c in the gif2tiff tool in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (segmentation fault) via a…
Affected: through 4.0.6
CVE-2016-9273
5.5
4%
Jan 18
tiffsplit in libtiff 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a crafted file, related to changing td_nstrips in TIFF_STRIPCHOP mode
Affected: 4.0.6
CVE-2015-8683
5.5
3%
Apr 13
The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via a packed TIFF image
Affected: 4.0.6
CVE-2015-8665
5.5
3%
Apr 13
tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the SamplesPerPixel tag in a TIFF image
Affected: 4.0.6
Page 4 of 6 · 262 total